If you’re running WordPress and want to check if your instance is vulnerable, you can use our tool we’ve hosted here: https://wp2shell.com/ . We held off on publishing this issue to give defenders a chance to upgrade their WordPress instances over the weekend, but during that time, Calif and Hacktron were able to independently reproduce the full chain before other PoCs surfaced on GitHub. The Story of wp2shell Like most security researchers, we follow the new model releases at Searchlight Cyber very closely. When GPT5.6 Sol Ultra was released, we were very excited to test it out. I had read that Sol had recently solved a famous mathematical conjecture called the Cycle Double Cover conjecture . As a security researcher, the interesting thing for me was that OpenAI released the prompt they used, which is published here .…